This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json) Hash identifier: EAuY/HIh4i8pz2LHjkd7n4vym4tOPMvUh7akwS4eeR0= Subject key identifier: 2F:4D:D4:42:2F:86:56:BC:82:39:20:2B:F1:AC:E2:9E:EC:70:BB:E1 Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Certificate serial: 019BF9C04A88AF040E70E0E75B9E5F696F0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 10:01:27 +0000 Manifest this update: Mon 26 Jan 2026 10:01:27 +0000 Manifest next update: Tue 27 Jan 2026 10:01:27 +0000 Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: 8c2hQE34firDGVHuHiBZhcpZFbHn2BjeRBFubBeUlaU=) 2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:4a:88:af:04:0e:70:e0:e7:5b:9e:5f:69:6f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Validity Not Before: Jan 26 10:01:27 2026 GMT Not After : Jan 27 10:01:27 2026 GMT Subject: CN=2f4dd4422f8656bc8239202bf1ace29eec70bbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:a4:62:01:5e:79:6a:bd:4f:84:ba:36:bf: 84:ae:ec:0b:35:e1:40:7f:4c:07:92:6a:84:e8:87: db:f1:0f:3e:b6:ff:a1:c3:81:32:6b:eb:5d:f7:4f: f8:ce:e3:c5:9d:2e:86:24:cf:cb:5f:16:51:2d:ae: 17:78:e2:07:00:d7:03:d7:e5:8e:45:c2:c8:b7:c9: 9a:8a:cf:fd:55:90:bc:2e:2e:4a:82:d6:b8:3b:29: 84:53:f4:7e:3e:70:f4:2b:38:45:5d:ef:36:c4:55: 02:ee:08:63:51:e0:ba:87:af:5d:53:fb:93:10:10: bb:f0:ff:cb:a2:18:cb:81:05:9c:ed:16:b3:d8:82: 19:c9:ed:d8:69:53:9a:4f:25:4a:e6:59:10:ff:6c: 60:b8:c2:1b:07:54:80:e6:6a:64:39:dd:66:31:67: 61:3f:05:08:02:bb:e7:06:9b:4e:f5:57:45:e4:8c: a4:84:46:4c:8c:19:21:37:d8:0a:e4:26:0f:9b:7b: d1:e2:43:ed:d3:e4:98:ee:d1:a8:42:81:96:63:58: 23:62:9f:0c:77:e3:9d:73:7c:7f:eb:fd:cd:07:52: d4:88:d1:b7:ca:ef:79:9d:40:2d:e6:f0:4e:34:58: e6:31:d8:ba:58:b9:14:f2:53:7c:ad:a2:cd:09:46: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:D4:42:2F:86:56:BC:82:39:20:2B:F1:AC:E2:9E:EC:70:BB:E1 X509v3 Authority Key Identifier: keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6f:c7:f4:c1:25:f3:bb:ec:04:39:0a:e3:69:6b:02:04:5c: 70:57:71:c5:19:c7:b1:a8:24:df:da:48:d3:b5:a4:ca:ed:88: 8d:17:65:ec:bb:0e:02:99:33:67:75:39:ec:2a:bd:49:45:1d: b7:fb:e6:50:b8:e4:ed:bb:fc:f0:0a:a0:a2:a0:90:28:29:15: 2b:7a:c7:13:2b:0f:e6:4d:7d:0e:23:f4:ee:a2:11:c4:e0:16: 6b:c3:1a:8d:1b:b9:e4:f8:5e:6e:39:4f:6a:ad:7b:12:4d:35: c3:61:e0:41:3b:1a:aa:b5:57:2c:46:c7:3e:4e:78:51:cc:be: ff:d8:8a:c5:4a:e9:a0:cf:bc:a1:48:3c:8c:d4:08:19:ca:44: 3a:ad:1a:ce:32:cd:85:44:a9:63:63:f9:0c:c6:e6:05:fc:8f: c1:2b:ea:6e:e9:ba:8a:94:cc:d7:5c:08:9f:e0:f6:bd:d9:9e: 74:c7:e1:99:f2:2b:93:15:b4:7d:ad:44:af:e4:f8:aa:e7:3a: dd:e7:6f:d0:d5:38:bd:71:b3:69:d4:16:49:e1:62:0e:52:33: 7a:70:e0:11:d0:0b:c7:dd:fe:3b:41:81:ba:90:25:34:7d:b6: 54:13:98:8d:ed:8d:1e:6f:ae:28:4f:d2:34:58:02:31:73:40: 3c:db:d5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wEqIrwQOcODnW55faW8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl NGRkNmMwHhcNMjYwMTI2MTAwMTI3WhcNMjYwMTI3MTAwMTI3WjAzMTEwLwYDVQQD EygyZjRkZDQ0MjJmODY1NmJjODIzOTIwMmJmMWFjZTI5ZWVjNzBiYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqykYgFeeWq9T4S6Nr+EruwLNeFA f0wHkmqE6Ifb8Q8+tv+hw4Eya+td90/4zuPFnS6GJM/LXxZRLa4XeOIHANcD1+WO RcLIt8mais/9VZC8Li5Kgta4OymEU/R+PnD0KzhFXe82xFUC7ghjUeC6h69dU/uT EBC78P/LohjLgQWc7Raz2IIZye3YaVOaTyVK5lkQ/2xguMIbB1SA5mpkOd1mMWdh PwUIArvnBptO9VdF5IykhEZMjBkhN9gK5CYPm3vR4kPt0+SY7tGoQoGWY1gjYp8M d+Odc3x/6/3NB1LUiNG3yu95nUAt5vBONFjmMdi6WLkU8lN8raLNCUatjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9N1EIvhla8gjkgK/Gs4p7scLvhMB8GA1UdIwQY MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmW/H9MEl 87vsBDkK42lrAgRccFdxxRnHsagk39pI07Wkyu2IjRdl7LsOApkzZ3U57Cq9SUUd t/vmULjk7bv88AqgoqCQKCkVK3rHEysP5k19DiP07qIRxOAWa8MajRu55PhebjlP aq17Ek01w2HgQTsaqrVXLEbHPk54Ucy+/9iKxUrpoM+8oUg8jNQIGcpEOq0azjLN hUSpY2P5DMbmBfyPwSvqbum6ipTM11wIn+D2vdmedMfhmfIrkxW0fa1Er+T4quc6 3edv0NU4vXGzadQWSeFiDlIzenDgEdALx93+O0GBupAlNH22VBOYje2NHm+uKE/S NFgCMXNAPNvVpA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:33 2026 by rpki-client